AW: [EXT] [OE-core] [PATCH v7 11/20] kernel-fit-image.bbclass: add a new FIT image implementation

[Denis OSTERLAND-HEIM <denis.osterland@diehl.com>]

Hi Adrian,

Thanks for your reply.
I was not aware of a version from meta-oe, but that fits my needs.
You are right, it is strange that there are two variants.
On the other hand, oe-core does not have the signing class either and therefor must not be compatible.
Maybe one day meta-oe fitimage class inherits from kernel-fit-image class and adds the compatibility for signing class.
Your resigning idea looks doable, but I would prefer to not introduce a stub key.

Regards, Denis

-----Ursprüngliche Nachricht-----
Von: Freihofer, Adrian <adrian.freihofer@siemens.com>
Gesendet: Donnerstag, 4. Dezember 2025 16:02
An: Denis OSTERLAND-HEIM <denis.osterland@diehl.com>; openembedded-core@lists.openembedded.org
Betreff: [EXT] Re: [EXT] [OE-core] [PATCH v7 11/20] kernel-fit-image.bbclass: add a new FIT image implementation

[EXTERNAL EMAIL]


Hi Denis

I'm not entirely sure which FIT image implementation you are using: the one from oe-core or the one from meta-openembedded. Since you are asking me personally, I assume it is the one from oe-core.

I suspect that the classes from meta-openembedded are not compatible with the FIT image implementation in oe-core. But I'm probably not the right person to answer this question, as I don't even understand why a second FIT image implementation was necessary instead of improving the one in oe-core. From my perspective, it would probably be better to extend the run_mkimage_sign function in oe-core with PKCS#11 support than to maintain a second FIT image implementation in meta-openembedded.

Another approach is to perform the signing within bitbake using a key from a file. Signing with a more secure PKCS#11 backend can be performed as a re-signing, which is done independently of bitbake as the final step in the release process.

Regards,
Adrian
Diehl Metering GmbH, Donaustrasse 120, 90451 Nuernberg
Sitz der Gesellschaft: Ansbach, Registergericht: Ansbach HRB 69
Geschaeftsfuehrer: Dr. Christof Bosbach (Sprecher), Dipl.-Dolm. Annette Geuther, Dipl.-Kfm. Reiner Edel, Jean-Claude Luttringer

Bitte denken Sie an die Umwelt, bevor Sie diese E-Mail drucken. Diese E-Mail kann vertrauliche Informationen enthalten. Sollten die in dieser E-Mail enthaltenen Informationen nicht für Sie bestimmt sein, informieren Sie bitte unverzueglich den Absender per E-Mail und loeschen Sie diese E-Mail in Ihrem System. Jede unberechtigte Form der Reproduktion, Bekanntgabe, Aenderung, Verteilung und/oder Publikation dieser E-Mail ist strengstens untersagt. Informationen zum Datenschutz finden Sie auf unserer Homepage<https://www.diehl.com/metering/de/impressum-und-rechtliche-hinweise/>.

Before printing, think about environmental responsibility.This message may contain confidential information. If you are not authorized to receive this information please advise the sender immediately by reply e-mail and delete this message without making any copies. Any form of unauthorized use, publication, reproduction, copying or disclosure of the e-mail is not permitted. Information about data protection can be found on our homepage<https://www.diehl.com/metering/en/data-protection/>.